Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/cRUeZN_1ltceJ4ZKnaKYFyfvQ1A.roa
File: cRUeZN_1ltceJ4ZKnaKYFyfvQ1A.roa (raw, json)
Hash identifier: SHifexQ4YicwIc6eSqBiaG2aJTQYl9Rg56k6uOcmoEA=
Subject key identifier: 71:15:1E:64:DF:F5:96:D7:1E:27:86:4A:9D:A2:98:17:27:EF:43:50
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01FC54ED
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/cRUeZN_1ltceJ4ZKnaKYFyfvQ1A.roa
Signing time: Sat 01 Jan 2022 06:02:59 +0000
ROA not before: Sat 01 Jan 2022 06:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.228.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33314029 (0x1fc54ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 1 06:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71151e64dff596d71e27864a9da2981727ef4350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:b4:71:3f:2d:30:fb:1f:ed:0c:56:85:a6:
26:93:3f:a0:5c:43:eb:79:f3:5e:27:52:7f:42:3f:
21:ee:f0:92:54:13:40:87:81:d5:c8:55:b0:56:1f:
fb:5e:62:10:4a:ae:da:b9:d9:5d:d3:53:ab:5b:1d:
a6:3b:d9:18:1b:b5:4f:71:0e:8f:ba:09:e8:05:4b:
84:9d:55:fa:11:60:d8:90:8e:63:6f:ee:8b:e1:16:
2a:73:af:50:cf:55:63:1c:4c:e7:33:f2:c0:fe:35:
c8:15:72:75:aa:9a:d6:a0:8e:e4:c9:8e:d5:15:38:
93:c3:fa:f3:13:bf:f1:8e:0a:b9:ca:4b:5d:c4:d9:
d4:35:f0:d8:85:d7:4a:f2:7f:dd:5d:2e:97:18:2d:
cc:12:3e:3a:08:d8:d4:7c:b1:c6:a5:2e:a0:31:95:
46:7f:fa:ef:12:17:56:da:65:bf:af:c6:8a:cd:ae:
34:ee:80:4b:5a:5a:81:e9:9d:88:d6:35:cd:74:ce:
1e:e3:59:72:f3:a1:50:17:09:5a:4d:a4:34:fd:95:
f7:5c:bf:41:55:fd:1e:66:75:c3:86:83:3b:86:7a:
e1:3e:56:31:f3:ca:52:bf:29:0d:1a:95:16:48:e5:
49:a1:35:aa:d5:47:84:06:a7:37:6f:66:d4:81:a8:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:1E:64:DF:F5:96:D7:1E:27:86:4A:9D:A2:98:17:27:EF:43:50
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/cRUeZN_1ltceJ4ZKnaKYFyfvQ1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:70:e2:46:f3:1f:41:83:63:d2:1a:b1:68:d0:90:a3:ac:96:
81:92:24:2b:99:f3:45:a0:32:9b:60:02:df:44:52:90:25:90:
96:4e:8d:75:bd:a3:9c:5c:36:43:a3:85:43:80:27:59:98:20:
f2:a4:7c:22:d2:7f:2c:03:56:71:ed:16:a2:55:83:77:fa:32:
88:fb:d8:a8:22:85:22:32:02:91:1d:55:54:ec:47:de:9c:92:
72:07:d7:45:82:54:23:f3:54:fd:57:bd:ce:27:f4:d7:09:a9:
c5:d5:5d:b1:55:e1:43:3e:25:17:17:ee:41:54:c6:91:85:1f:
58:c0:46:1b:7d:59:33:71:58:e4:87:2f:a8:0b:40:f2:6b:e0:
24:ca:cd:34:98:d9:48:81:5b:06:15:12:48:20:97:aa:db:53:
0c:7f:fc:d1:06:a4:7e:c2:b5:e9:ed:f5:c4:62:be:5d:ac:2b:
66:41:0a:38:7b:02:ec:40:af:bb:22:5f:e9:92:50:ff:af:22:
15:8e:48:1d:86:08:23:48:56:84:80:cc:4e:9d:77:aa:60:36:
23:6e:b0:33:fe:60:39:b1:8d:66:d3:0d:1e:8d:f4:01:c0:15:
a0:03:84:cc:9c:22:8a:82:9c:38:07:59:a2:59:2c:c6:33:47:
9c:56:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-fra.rpki-client.org